types of vendor risks